$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/17d44661-cd2c-3151-81fa-24d06d36d33a.roa File: 17d44661-cd2c-3151-81fa-24d06d36d33a.roa (raw, json) Hash identifier: PCrVoKjkJy/gtL71zPK4pSMKNeuJ1q/30a0Eie5LLGY= Subject key identifier: 1D:2B:84:FF:25:B9:17:87:A7:B2:DF:10:03:3F:12:E8:E0:C0:D2:30 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F1467AB8F8E1AC7A4FFC47880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/17d44661-cd2c-3151-81fa-24d06d36d33a.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 396604 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:ab:8f:8e:1a:c7:a4:ff:c4:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=1f6a0b81-9754-4369-b1f2-c695551e945c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a2:11:8f:6a:32:08:9c:0c:0f:ff:63:43:1c: e7:2c:99:89:b0:6c:26:4e:6b:62:49:19:71:a9:84: 1b:18:bb:6d:d8:f4:f5:0d:c2:7c:ed:54:8a:5d:47: 5b:ed:b8:db:33:4f:17:bf:4f:b7:03:22:47:71:28: 2d:0f:55:c9:f7:7b:51:3c:9f:f7:a3:17:64:3e:6f: 82:73:28:a9:b7:f8:7a:e6:09:e6:79:50:08:e8:bf: c8:ff:72:28:52:f0:f9:f2:3e:b3:2c:8d:fa:fb:a9: 9f:c5:02:bd:6f:0f:d5:3d:db:37:b7:b5:dc:9c:8d: a9:5f:a7:31:e5:ee:a3:23:8d:f4:ba:01:e1:8b:55: 5c:7a:09:9a:4a:a9:13:7a:75:cb:4b:6e:d8:4d:0d: 00:a1:e2:ce:31:ac:26:9b:c2:c8:f1:65:18:44:03: c6:23:96:52:48:fe:d4:48:b0:21:53:7c:98:a4:4f: 71:e7:26:2d:94:52:d7:c8:14:84:54:f9:cb:9c:54: 72:83:c9:3b:69:81:2e:88:12:f2:69:da:a1:17:7e: 82:ee:75:c7:f9:55:e4:58:6f:db:de:28:35:81:ff: 9c:74:38:6b:47:f8:77:d3:cc:6d:53:4b:bb:0b:99: 05:94:5e:5f:52:de:9d:04:e9:84:60:85:01:80:e8: 64:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:2B:84:FF:25:B9:17:87:A7:B2:DF:10:03:3F:12:E8:E0:C0:D2:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/17d44661-cd2c-3151-81fa-24d06d36d33a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:4e:b1:fc:1b:40:2a:49:68:f1:42:c1:9e:a4:aa:fe:e3:4d: f7:81:0b:a6:7b:eb:7b:04:a7:de:93:13:29:68:13:20:27:08: 14:7c:a8:3c:57:c7:c5:d4:b6:78:63:c5:b3:d5:ba:68:6f:f4: 81:b2:5a:6e:4b:2c:f2:94:97:20:d4:62:b7:2a:42:71:94:04: 70:1c:3c:b7:84:db:c2:5c:af:42:e9:94:46:cc:05:b4:ce:20: eb:f8:74:36:3c:a7:61:e6:9d:29:27:66:7f:8a:ee:94:5b:81: fd:25:37:58:01:63:54:46:c5:58:de:3c:11:ab:9b:97:35:12: 90:38:f7:34:cc:6e:26:a9:ad:69:f3:b6:d5:7d:ed:35:6e:50: e5:02:80:52:60:45:4d:92:6a:fc:8c:d0:91:1c:2c:cc:35:7a: 88:ec:00:55:2e:43:28:24:10:03:e5:76:b5:e9:b6:a2:22:39: 40:46:45:26:ce:25:1d:fd:57:c2:46:0a:62:97:57:2e:c7:e8: 6c:db:bd:cd:6d:7f:78:b9:3b:b4:91:f7:7f:0b:c8:70:96:05: c7:c8:05:09:7d:d9:ee:2e:07:81:a7:a4:c0:05:d4:4e:3e:4c: cb:d8:f2:e4:09:87:7a:e4:93:0e:6f:30:57:bf:45:cc:ca:e4: a8:72:b4:04 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ6uPjhrHpP/EeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk MWY2YTBiODEtOTc1NC00MzY5LWIxZjItYzY5NTU1MWU5NDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqIRj2oyCJwMD/9jQxznLJmJsGwmTmtiSRlx qYQbGLtt2PT1DcJ87VSKXUdb7bjbM08Xv0+3AyJHcSgtD1XJ93tRPJ/3oxdkPm+C cyipt/h65gnmeVAI6L/I/3IoUvD58j6zLI36+6mfxQK9bw/VPds3t7XcnI2pX6cx 5e6jI430ugHhi1VcegmaSqkTenXLS27YTQ0AoeLOMawmm8LI8WUYRAPGI5ZSSP7U SLAhU3yYpE9x5yYtlFLXyBSEVPnLnFRyg8k7aYEuiBLyadqhF36C7nXH+VXkWG/b 3ig1gf+cdDhrR/h308xtU0u7C5kFlF5fUt6dBOmEYIUBgOhkVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB0rhP8luReHp7LfEAM/EujgwNIwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTdkNDQ2NjEtY2QyYy0z MTUxLTgxZmEtMjRkMDZkMzZkMzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAZOsfwbQCpJaPFCwZ6kqv7jTfeBC6Z763sEp96TEyloEyAnCBR8 qDxXx8XUtnhjxbPVumhv9IGyWm5LLPKUlyDUYrcqQnGUBHAcPLeE28Jcr0LplEbM BbTOIOv4dDY8p2HmnSknZn+K7pRbgf0lN1gBY1RGxVjePBGrm5c1EpA49zTMbiap rWnzttV97TVuUOUCgFJgRU2SavyM0JEcLMw1eojsAFUuQygkEAPldrXptqIiOUBG RSbOJR39V8JGCmKXVy7H6Gzbvc1tf3i5O7SR938LyHCWBcfIBQl92e4uB4GnpMAF 1E4+TMvY8uQJh3rkkw5vMFe/RczK5KhytAQ= -----END CERTIFICATE-----Generated at Mon Sep 21 21:00:30 2026 by rpki-client